Secret Code Found in Juniper's Firewalls Shows Risk of Government Backdoors

Re:Secret Code Found in Juniper's Firewalls Shows Risk of Go... by Taek on Saturday December 19, 2015 @05:23AM (#10763204)

Signal is open source. But you have to trust the OS it runs on...

[ Parent | on HN ]

Re:Secret Code Found in Juniper's Firewalls Shows Risk of Go... by junto on Saturday December 19, 2015 @05:55AM (#10763242)

And even if you trust the OS, you have no idea what is going on on the phone's baseband processor: https://en.m.wikipedia.org/wiki/Baseband_processor

One has to assume that all are back-doored. Mobile phones are inherently not trustable.

Same goes for all major firewall vendors. If you going to hack one of them as a nation state, then you're going to do all of them.

[ Parent | on HN ]

Re:Secret Code Found in Juniper's Firewalls Shows Risk of Go... by garrettgrimsley on Saturday December 19, 2015 @06:18AM (#10763284)

There is at least one project that seeks to mitigate the threat posed by baseband processors having DMA, Neo900: http://neo900.org/faq#privacy

[ Parent | on HN ]

Re:Secret Code Found in Juniper's Firewalls Shows Risk of Go... by hdmoore on Saturday December 19, 2015 @12:01PM (#10764079)

Even if you trust the OS and the baseband, you have to trust that the federated server for Signal (OpenWhisper, Cyanogen, etc) isn't storing contact discovery requests.

[ Parent | on HN ]

Re:Secret Code Found in Juniper's Firewalls Shows Risk of Go... by tux1968 on Saturday December 19, 2015 @05:44AM (#10763224)

And the hardware the OS runs on... Intel and others are now embedding "management" features at a very low level.

[ Parent | on HN ]